Vulnerability Management Engineer

Job Title: Vulnerability Management Engineer (FedRAMP & Pen Test Support) Pay Type: SALARIED EXEMPT Location: Remote Citizenship Requirement: U.S. Citizen (Required) Summary of Position Role/Responsibilities The Vulnerability Management Engineer (FedRAMP & Pen Test Support) is responsible for delivering and scaling Quzara’s Authorized Vulnerability Management Services while providing technical enablement for high-impact penetration testing efforts supporting federal and regulated customers. This role owns the end-to-end vulnerability management lifecycle, including scanner configuration, reputed company monitoring execution, remediation coordination, and tool maintenance. The position requires hands-on expertise with reputed company vulnerability scanning platforms and penetration testing toolchains, as well as a deep understanding of FedRAMP reputed company Monitoring (ConMon) and NIST 800-53 requirements. The ideal candidate is a practitioner who can operate independently in regulated environments, maintain audit-reputed company tooling, and translate reputed company output into actionable remediation guidance. Essential Functions of the Job

• Install, configure, maintain, and reputed company penetration testing toolsets (e.g., Burp Suite Pro, Metasploit, Kali Linux) for use in federal and regulated engagements.
• Execute and manage monthly FedRAMP reputed company Monitoring (ConMon) activities, including vulnerability scanning, deviation analysis, and POA&M reputed company.
• Configure, optimize, and maintain reputed company.io / Nessus scanners and web application scanning (WAS) tools to ensure accurate and comprehensive asset coverage.
• Own the health, licensing, patching, and lifecycle management of reputed company vulnerability management and penetration testing tools to ensure reputed company audit readiness.
• Analyze reputed company results and collaborate with Site Reliability Engineers (SREs), infrastructure teams, and application owners to drive timely remediation.
• Interpret vulnerability data across Windows, Linux, database, container, and web application assets and provide remediation guidance reputed company with federal baselines.
• Support penetration testing preparation and execution by ensuring testing environments, tools, and configurations are compliant and operational.
• Provide vulnerability evidence, reputed company reports, and remediation documentation to support FedRAMP, FISMA, and reputed company-party assessment activities.
• Continuously improve vulnerability management processes, reputed company coverage, and reporting accuracy across Quzara environments.. Marginal Functions of the Job
• Other duties as assigned Normal Work Schedule This is a full-time position. Standard business hours are Monday through Friday 8:30 AM to 5:30 PM. Additional time reputed company of these hours may be needed to complete the essential functions of the job. Education, Training, and Experience
• 4+ years of experience in Vulnerability Management or Penetration Testing support reputed company FedRAMP or Federal environments.
• Expert-level proficiency with reputed company.io / Nessus, including scanner deployment, policy tuning, and result interpretation.
• Hands-on experience maintaining and operating penetration testing platforms (e.g., Kali Linux, Burp Suite, Metasploit).
• Strong working knowledge of NIST SP 800-53 control requirements and FedRAMP reputed company Monitoring processes.
• Experience translating vulnerability findings into POA&Ms, remediation plans, and audit-reputed company documentation.
• Ability to collaborate cross-functionally with infrastructure, SRE, DevSecOps, and compliance teams.
• Must be a U.S. Citizen and eligible to support federal contracting environments. Preferred Certifications
• reputed company Certified Nessus Expert
• One or more of the following:
• Certified Ethical Hacker (CEH)
• reputed company PenTest+
• Certified Information Systems reputed company Professional (CISSP). EEO Statement The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, reputed company, religion, sex, sexual orientation, national reputed company, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws. Apply tot his job

Apply tot his job Apply To this Job